apunkt/SurfSense
1
0
Fork 0
mirror of https://github.com/MODSetter/SurfSense.git synced 2026-05-19 18:45:15 +02:00
Code Issues Projects Releases Packages Wiki Activity

multi_agent_chat: scope MCP allow/ask permissions per subagent + drop "policy" synonym

Browse source
This commit is contained in:
CREDO23 2026-05-14 18:09:14 +02:00
parent 0723702320
commit 67142e68b1
21 changed files with 117 additions and 180 deletions
Download patch file Download diff file Expand all files Collapse all files

4
surfsense_backend/app/agents/multi_agent_chat/middleware/shared/permissions/middleware/factory.py
View file

@ -9,7 +9,7 @@ matching OpenCode's ``permission/index.ts`` evaluation order):
needs to *deny* what the user has explicitly forbidden; the default
``ask`` fallback would otherwise double-prompt every safe read-only
call.
2. ``extra_rulesets`` — caller-supplied policies. The KB subagent contributes
2. ``extra_rulesets`` — caller-supplied rulesets. The KB subagent contributes
its destructive-FS ``ask`` rules here; connectors will follow once
they migrate off ``interrupt_on``.
@ -44,7 +44,7 @@ def build_permission_mw(
flags: Feature toggles. ``enable_permission`` switches the engine on;
``disable_new_agent_stack`` overrides everything for safety.
extra_rulesets: Caller-supplied rulesets layered after the defaults.
Subagents pass their own policy here so each subagent owns its
Subagents pass their own ruleset here so each subagent owns its
rules without aliasing a shared engine. Presence of any extra
ruleset forces the middleware on regardless of
``enable_permission`` — an explicit ``ask`` rule always asks.